Suffered data breach exposing 31 million user records due to unsecured authentication tokens
Oct 9, 2024In October 2024, Internet Archive suffered a significant data breach affecting 31 million users. Attackers exploited unsecured Zendesk API tokens that had been accessible in a GitLab repository for nearly two years. Exposed data included email addresses, screen names, and bcrypt password hashes. A second breach occurred via unrotated tokens after the initial attack.